similar to: Access denied editing DNS using RSAT

On Tue, 2017-09-12 at 11:21 +0200, Daniel Carrasco via samba wrote: > Hello, > > I'm trying to replace an old Windows Server 2003 with Samba 4 and I've got > a problem trying to add some DNS entries. When I open the RSAT DNS manager > I got an Access Denied error and I can't edit the zones. > > My config file is the generated by samba-tool and I'm using Samba

I found this page https://bugzilla.samba.org/show_bug.cgi?id=12807 which seemed to have someone experiencing the same issue I am. I tried adding "allow dcerpc auth level connect:dnsserver = yes" to my smb.conf, rebooted the server, but still I get the an access denied message in windows. However, what is logged in the log.samba files has changed since adding this option to my smb.conf.

The user is a member of "Domain Admins" so they should be able to access the DNS (as is evident by the fact that they can access the DNS thru RSAT on the initial DC). But just to be thorough I have added "Domain Admins" to the group "DnsAdmins" and tested again, still get the "access denied" error from within windows. On Tue, Dec 12, 2017 at 11:01 AM,

Daniel, I could kiss you :D I am using the default SSL certs in samba. I tried connecting to the new DC using it's FQDN instead of it's IP, and BAM, it connected just fine. Couldn't really tell you why, but as long as I can access it I'm happy! On Tue, Dec 12, 2017 at 11:20 AM, Daniel Carrasco <d.carrasco at i2tic.com> wrote: > Are you using the default ssl certs in

Hello all, My Server is CentOS 7 and I'm running Samba 4.10.4 compiled from scratch. When I try to open DNS in RSAT I receive this message: Access was denied. Would you like to add it anyway? In my log.samba file I see this message: [2019/06/18 19:48:26.176994, 3] ../../lib/ldb-samba/ldb_wrap.c:332(ldb_wrap_connect) ldb_wrap open of secrets.ldb [2019/06/18 19:48:26.202329, 3]

I tried the version 4.2.11 and will not let me access the DNS via RSAT, I changed several permissions in several ways and does not allow me access will be a bug? if i try to browse dns from a windows2003 dns management utility in log.samba i got the following message: [2016/04/16 09:39:45.296046, 2] ../source4/rpc_server/dcerpc_server.c:1275(dcesrv_request) dcesrv_request: restrict

Good morning all! I have two DCs, both running Samba 4.7.3. I have just joined the second DC to the domain. The second DC is replicating AD objects perfectly, I verified this by running "samba-tool drs showrepl" as well as using the ADUC RSAT snapin and adding a user to one DC, then switching the DC that ADUC connects to and verifying that the user was properly replicated. The DNS

On 12/12/2017 11:24 AM, Taylor Hammerling via samba wrote: > I found this page https://bugzilla.samba.org/show_bug.cgi?id=12807 which > seemed to have someone experiencing the same issue I am. > I tried adding "allow dcerpc auth level connect:dnsserver = yes" to my > smb.conf, rebooted the server, but still I get the an access denied message > in windows. > However,

Are you using the default ssl certs in samba?. I had a similar issue, and after create my own certificate with all common names used on my domain (for example domain.com, dc1.domain.com and dc2.domain.com), I'm able to manage the dns using RSAT using that named. With ip address still failing. Greetings!! El 12 dic. 2017 6:13 p. m., "Taylor Hammerling via samba" < samba at

I cranked up the log level to 3 and found this in the log.samba file when trying to open the DNS Manager RSAT from my client machine (which is joined to the same domain as the DCs) [2017/12/12 09:59:30.601170, 2] ../source4/rpc_server/dcerpc_server.c:1804(dcesrv_request) dcesrv_request: restrict auth_level_connect access to [dnsserver] with auth[type=0xa,level=0x2] on [ncacn_ip_tcp] from

I tried the version 4.2.11 and will not let me access the DNS via RSAT, I changed several permissions in several ways and does not allow me access will be a bug? if i try to browse dns from a windows2003 dns management utility in log.samba i got the following message: [2016/04/16 09:39:45.296046, 2] ../source4/rpc_server/dcerpc_server.c:1275(dcesrv_request) dcesrv_request: restrict

I have my Samba4 up and running. I was able to get a Windows 2012 server to join the samba4 domain. However, I have not been able to get the Windows server to promote itself to a secondary DC. I would appreciate any suggestions on debugging this issue. One the Server 2012 machine, in the "prerequisites check", I see the following message: "Verification or prerequisites for

We have setup Samba 4.1 as a PDC. We have successfully connected several Windows 2008 Servers to the domain and created various users/groups. During an application installation on the Windows server, it runs the command in SQL server: master..xp_logininfo 'MYDOMAIN\useraccount' SQLserver is running as a service user created on the domain (here called MYDOMAIN) This returns: Msg

New to linux and new to Samba so any direction in troubleshooting would be helpful. Here is what I have so far. Within a half an hour of a reboot of the server my cpu reaches high numbers and becomes slow to respond on all actions. With my limited understanding I have used vmstat to observe the system. I noticed is that the numbers of forks grows from 1-2k to 43k within 30 minutes after reboot. I

After a user changes their password (CTRL-ALT-DEL) in our Samba 4 domain (4.1.12) they lose access to any stored passwords on their Windows PC. I've set the log level in smb.conf to 4 and enabled the GPO to record DPAPI log entries in Windows to get the below log data. My reading of the two is that the Windows PC believes it is failing to reset the access to its DPAPI store (where the saved

On 18/12/14 16:19, Germ van Eck wrote: > Not sure about the high CPU load, but you have the [netlogon] share > twice in your smb.conf. Your first matches mine, have you added the > second yourself? > The second one looks weird with 2 path definitions. > Cj Tibbetts schreef op do 18-12-2014 om 08:59 [-0700]: >> New to linux and new to Samba so any direction in troubleshooting

Hello to the Samba Mailing List, This is my first post, so please, should I commit any faux pas, nudge me in the right direction and I will adjust accordingly. I'm experiencing a complete failure of the PDC in a Samba 4 AD Domain I've deployed for a client. Samba failed a few days ago and I've been unable to resolve the issue on my own. Google searches are leading me in circles,

Hi, It's my first try to setup RODC using Samba 4.8. We have latest Samba 4.7 environnement with 2 DC and some file servers. Joining the DC to the domain is OK using samba-tool domain join command. The domain controller appears in the DC list (MMC) However, users cannot be authenticated. Samba is running but these ports are closed : netbios-ssn 139/tcp # NETBIOS session service

Hi there, Let me just start by saying that I am a bit of a Linux newbie, but that Shorewall seems an excellant product. The issue I''m reporting wont stop me from using it, it still does 99% of what I need. Anyway, I have a resonably simple two interface system. My server (HatMannz, P3-900MHz with a RAID-1 array of 80GB IDE drives running Red Hat 9.0) connects to a cable modem via eth1

Not sure about the high CPU load, but you have the [netlogon] share twice in your smb.conf. Your first matches mine, have you added the second yourself? The second one looks weird with 2 path definitions. Cj Tibbetts schreef op do 18-12-2014 om 08:59 [-0700]: > New to linux and new to Samba so any direction in troubleshooting would be > helpful. Here is what I have so far. > > Within